On Tuesday, October 4, 2016 10:10:31 AM EDT leam hall wrote: > For /etc/audisp/plugins.d/syslog.conf, is "LOG_WARN" an accpeted arg, or > does it need to be "LOG_WARNING"? LOG_WARNING. https://fedorahosted.org/audit/browser/trunk/audisp/audispd-builtins.c#L279 -Steve